Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: MdoBSfJhXzlUXATm0E5oTHvE4VjuVsIG15SUAfLSViA=
Subject key identifier: 7E:50:0D:F3:6B:81:53:EA:76:C9:56:E4:46:57:44:02:8E:F2:96:FF
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 0196BD495FCE1C54BF47E8468A4EEE518378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 0E40
Signing time: Sun 11 May 2025 03:00:24 +0000
Manifest this update: Sun 11 May 2025 03:00:24 +0000
Manifest next update: Mon 12 May 2025 03:00:24 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: f3+YY6wAo12lvBsqqCKgBdfRX7G987VOUmfHbzMLSt8=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:5f:ce:1c:54:bf:47:e8:46:8a:4e:ee:51:83:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: May 11 03:00:24 2025 GMT
Not After : May 12 03:00:24 2025 GMT
Subject: CN=7e500df36b8153ea76c956e4465744028ef296ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:f5:06:2a:c0:56:7a:7e:94:b5:72:e8:16:
8f:50:c1:30:b3:6c:93:6a:4d:6d:b3:9e:64:cf:23:
c7:e9:a3:9e:75:b3:4e:8a:bf:4e:0d:9e:63:8f:0b:
c0:a4:a1:07:ed:5e:a6:01:fb:4f:fd:5d:c3:16:13:
ac:1e:20:2d:dc:eb:af:ed:16:48:74:45:e5:48:16:
68:b9:b2:67:b7:78:ae:26:8b:77:e4:72:71:60:f1:
8a:7d:c5:90:f4:63:21:ab:80:47:c1:31:50:06:99:
1e:b5:ea:51:41:c5:5e:25:cb:0b:6f:10:bb:cf:79:
ea:e2:f4:32:4f:fb:2b:22:e3:c3:8e:81:b3:fb:44:
4a:4a:74:b3:3d:2d:53:99:a8:17:6b:91:3e:18:1b:
52:e3:9f:b9:cc:fd:9c:82:9f:43:7d:bc:b1:cf:ea:
4a:fb:23:bf:90:19:6c:1e:19:96:bd:3d:3e:95:a5:
7d:58:06:bc:e7:e7:0d:79:5a:6f:ff:15:aa:46:8b:
d2:c9:8e:4c:95:6c:41:26:af:aa:c6:08:99:ba:5a:
ff:72:2b:77:74:e3:43:1b:99:1c:6a:0c:c8:3d:a8:
e2:76:0c:45:97:2a:bc:9f:d2:1d:4e:6c:48:ec:05:
ef:13:5e:e9:f4:9e:a8:70:c2:7b:e0:28:54:7b:0c:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:0D:F3:6B:81:53:EA:76:C9:56:E4:46:57:44:02:8E:F2:96:FF
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:79:54:72:4a:1d:b6:00:6e:3a:9e:be:9b:06:ab:ae:79:
a5:e3:16:8d:e8:fc:05:a4:37:c0:71:42:7c:7e:35:7c:be:58:
68:8a:0d:a5:8c:ce:ca:c8:82:ac:e4:8c:4f:01:7e:38:4c:1d:
8b:b9:0c:38:c1:f9:97:c2:c7:8d:a6:ee:11:03:85:f1:5e:3f:
61:8c:20:f9:4b:c3:d8:0b:10:fd:68:a3:84:98:f7:53:bb:6d:
9c:d0:45:0a:98:e1:0f:30:f2:06:9d:cd:49:9e:7b:fb:52:9a:
9e:fa:34:83:b2:e5:df:48:75:b1:6b:a2:74:d9:56:c8:a5:59:
cd:2a:7b:1c:c3:70:12:64:22:c3:39:b5:c7:6b:92:e6:cb:08:
86:fc:e1:e8:6d:ba:76:9d:1c:a4:c3:44:19:d4:e2:92:f7:18:
44:2b:b1:c4:af:c6:0f:88:1e:df:87:50:a6:b3:ea:be:fa:e1:
1a:ed:2b:22:f0:12:c2:00:04:8d:bb:40:6c:36:ae:79:de:7b:
bc:2d:66:39:34:d5:d8:a6:28:9d:aa:e9:40:9e:4b:c7:e9:cb:
83:de:23:82:46:90:25:3a:48:f1:dd:00:34:0a:d2:31:1f:40:
eb:fa:e7:7f:b1:d6:2c:81:a8:d6:32:ef:01:50:da:c5:68:bf:
37:5e:9e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SV/OHFS/R+hGik7uUYN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5
ODkyYTUwHhcNMjUwNTExMDMwMDI0WhcNMjUwNTEyMDMwMDI0WjAzMTEwLwYDVQQD
Eyg3ZTUwMGRmMzZiODE1M2VhNzZjOTU2ZTQ0NjU3NDQwMjhlZjI5NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7H1BirAVnp+lLVy6BaPUMEws2yT
ak1ts55kzyPH6aOedbNOir9ODZ5jjwvApKEH7V6mAftP/V3DFhOsHiAt3Ouv7RZI
dEXlSBZoubJnt3iuJot35HJxYPGKfcWQ9GMhq4BHwTFQBpketepRQcVeJcsLbxC7
z3nq4vQyT/srIuPDjoGz+0RKSnSzPS1TmagXa5E+GBtS45+5zP2cgp9Dfbyxz+pK
+yO/kBlsHhmWvT0+laV9WAa85+cNeVpv/xWqRovSyY5MlWxBJq+qxgiZulr/cit3
dONDG5kcagzIPajidgxFlyq8n9IdTmxI7AXvE17p9J6ocMJ74ChUeww8wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5QDfNrgVPqdslW5EZXRAKO8pb/MB8GA1UdIwQY
MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt
YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk
LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqB5VHJK
HbYAbjqevpsGq655peMWjej8BaQ3wHFCfH41fL5YaIoNpYzOysiCrOSMTwF+OEwd
i7kMOMH5l8LHjabuEQOF8V4/YYwg+UvD2AsQ/WijhJj3U7ttnNBFCpjhDzDyBp3N
SZ57+1Kanvo0g7Ll30h1sWuidNlWyKVZzSp7HMNwEmQiwzm1x2uS5ssIhvzh6G26
dp0cpMNEGdTikvcYRCuxxK/GD4ge34dQprPqvvrhGu0rIvASwgAEjbtAbDaued57
vC1mOTTV2KYonarpQJ5Lx+nLg94jgkaQJTpI8d0ANArSMR9A6/rnf7HWLIGo1jLv
AVDaxWi/N16eoQ==
-----END CERTIFICATE-----
Generated at Sun May 11 04:59:21 2025 by rpki-client